** Changed in: ubuntu-system-settings-online-accounts
Status: In Progress = Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1468792
Title:
various apparmor denials when using
** Also affects: canonical-devices-system-image
Importance: Undecided
Status: New
** Changed in: canonical-devices-system-image
Importance: Undecided = Critical
** Changed in: canonical-devices-system-image
Status: New = Fix Released
** Changed in:
FYI:
09:18 rvr jdstrand: Hi, I'm testing silo 11 and I found some issues with
apparmor
09:18 rvr jdstrand: http://paste.ubuntu.com/11887897/
09:19 rvr jdstrand: The popup is stuck loading the login page
09:19 rvr jdstrand: During installation, I downgraded to
FYI:
10:35 jdstrand rvr: can you do: 'mkdir -p
/home/phablet/.cache/QML/Apps/online-accounts-ui/' then ttry again?
10:35 rvr jdstrand: Sure
10:38 rvr jdstrand: Jul 16 15:37:30 ubuntu-phablet kernel:
[52.552819]type=1400 audit(1437061050.590:131): apparmor=DENIED
operation=mknod
I should also mention that apparmor-easyprof-ubuntu 1.3.12 (and now
1.3.13) is in stable-phone-overlay and has the fixes in comment #10 and
#11.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1468792
This bug was fixed in the package ubuntu-system-settings-online-accounts
- 0.6+15.10.20150715-0ubuntu1
---
ubuntu-system-settings-online-accounts (0.6+15.10.20150715-0ubuntu1) wily;
urgency=medium
[ Alberto Mardegan ]
* Inject the APP_ID into the child process's environment.
The reason why the loading page stays forever is probably this:
LaunchProcess: failed to execvp:
/usr/lib/arm-linux-gnueabihf/oxide-qt/chrome-sandbox
I'll check if some other rules are missing.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed
** Branch linked: lp:ubuntu/wily-proposed/click-reviewers-tools
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1468792
Title:
various apparmor denials when using ubuntu-account-plugin template
To
Jun 26 12:31:44 ubuntu-phablet kernel: [49381.194192] type=1400
audit(1435311104.982:863): apparmor=DENIED operation=open
profile=com.ubuntu.developer.rmescandon.asana_account-plugin_1.0.0
name=/dev/tty pid=1914 comm=QQmlThread requested_mask=r
denied_mask=r fsuid=32011 ouid=0
This won't be
** Branch linked: lp:ubuntu/apparmor-easyprof-ubuntu
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1468792
Title:
various apparmor denials when using ubuntu-account-plugin template
To manage
I uploaded apparmor-easyprof-ubuntu with just the ubuntu/ubuntu-account-
plugin change to silo ubuntu-011 for vivid only (since I uploaded wily
to the archive). Please see additional testing notes in the citrain
spreadsheet (just a couple small things).
IMPORTANT: we should *not* include the
This bug was fixed in the package apparmor-easyprof-ubuntu - 15.10.5
---
apparmor-easyprof-ubuntu (15.10.5) wily; urgency=medium
* ubuntu/ubuntu-account-plugin (LP: #1468792):
- allow access to QML cache
- explicitly deny access to /proc/[0-9]*/mounts and
This bug was fixed in the package click-reviewers-tools - 0.30
---
click-reviewers-tools (0.30) wily; urgency=medium
* cr_security.py: verify required and allowed policy groups with the
ubuntu-account-plugin template (LP: #1468792)
* cr_systemd.py: whitespace pep8 fixes for
BTW, it's my impression that the QML cache errors are not critical, and
that the application would work even without any changes on our side, if
the author added the networking and webview policy groups.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is
There are still some warnings from apparmor, which appear to be
harmless, though (maybe the audio policy group is missing?). See the
attached file.
** Attachment added: Apparmor denials
So, with the fix for Online Accounts in the linked branch, save the attached
file as
/var/lib/apparmor/profiles/click_com.ubuntu.developer.rmescandon.asana_account-plugin_1.0.0
and then run
cd /var/lib/apparmor/profiles
sudo apparmor_parser -r
** Changed in: ubuntu-system-settings-online-accounts
Status: New = In Progress
** Changed in: ubuntu-system-settings-online-accounts
Importance: Undecided = Critical
** Changed in: ubuntu-system-settings-online-accounts
Assignee: (unassigned) = Alberto Mardegan (mardy)
--
You
Adding a click-reviewers-tools task to ensure accounts, networking and
webview are all specified when using the ubuntu-account-plugin template.
** Also affects: click-reviewers-tools (Ubuntu)
Importance: Undecided
Status: New
** Changed in: click-reviewers-tools (Ubuntu)
Status:
Note, this is affecting the asana app:
https://myapps.developer.ubuntu.com/dev/click-apps/2893/feedback/. This
should be part of the next OTA. Also, if apparmor-easyprof-ubuntu needs
to have the ubuntu-account-plugin template updated, this would be ok to
do as part of OTA, because this template is
Adding an apparmor-easyprof-ubuntu task for now, but depending on what
Alberto finds, it may not need a fix.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1468792
Title:
various apparmor denials
20 matches
Mail list logo
